Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker
-
Size
34KB
-
Sample
240312-2f8tksee92
-
MD5
5ac61d5f6ecf9fb1159dd0d0cc13af86
-
SHA1
dfceb79e8d4a9260fbfd04219d98d6943b43d888
-
SHA256
d07ccbf70ee7af8a34206cb8dd984271a0c7fb20ce5e89dfa5cfbccbb418081f
-
SHA512
2adb0d6894cd8044bb1b86f12352bc0d2ae61ee285fe68808652f2f17adda0b630af610e891ad2c3fe8af3d7ec31d41559989ecf292f56ad7c568d82a0f11fc8
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbo:b7o/2n1TCraU6GD1a4Xt9bRU6zAo
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker
-
Size
34KB
-
MD5
5ac61d5f6ecf9fb1159dd0d0cc13af86
-
SHA1
dfceb79e8d4a9260fbfd04219d98d6943b43d888
-
SHA256
d07ccbf70ee7af8a34206cb8dd984271a0c7fb20ce5e89dfa5cfbccbb418081f
-
SHA512
2adb0d6894cd8044bb1b86f12352bc0d2ae61ee285fe68808652f2f17adda0b630af610e891ad2c3fe8af3d7ec31d41559989ecf292f56ad7c568d82a0f11fc8
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbo:b7o/2n1TCraU6GD1a4Xt9bRU6zAo
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-